CVE-2015-0249

HIGH

7.2

CVSS Severity Score

EPSS Score0.0230%

EPSS Percentile28.12th

Published2017年7月17日

Last Modified2026年5月13日

Vulnerability Description

The weblog page template in Apache Roller 5.1 through 5.1.1 allows remote authenticated users with admin privileges for a weblog to execute arbitrary Java code via crafted Velocity Text Language (aka VTL).

Affected Platforms (CPE)

📦

Apache

Roller

= 5.1.0

📦

Apache

Roller

= 5.1.1

References & Advisories

🔗 http://cve.killedkenny.io/cve/CVE-2015-0249

🔗 http://www.openwall.com/lists/oss-security/2015/03/30/13

🔗 https://mail-archives.apache.org/mod_mbox/roller-user/201503.mbox/%3CCAF1aazAPWTduVhrPr7WiFaspFdsh21yf0YiSB3UmLjtDVGnfXw%40mail.gmail.com%3E

🔗 http://cve.killedkenny.io/cve/CVE-2015-0249

🔗 http://www.openwall.com/lists/oss-security/2015/03/30/13

🔗 https://mail-archives.apache.org/mod_mbox/roller-user/201503.mbox/%3CCAF1aazAPWTduVhrPr7WiFaspFdsh21yf0YiSB3UmLjtDVGnfXw%40mail.gmail.com%3E

Vulnerability Description

Affected Platforms (CPE)

Roller

Roller

References & Advisories

関連する脆弱性情報